Gaobot.KSS

It spreads and affects other computers.
It uses the infected computer to take malicious actions on other users.
It awaits remote-control orders to carry out.
It spreads
, across the Internet.

Affected platforms:

Windows 2003/XP/2000/NT/ME/98/95

First detected on:

Oct. 18, 2005

Detection updated on:

Oct. 18, 2005

Statistics

No

Brief Description

Gaobot.KSS is a worm that spreads by copying itself, without infecting other files.

It affects productivity, preventing tasks from being carried out:

In the affected computer:
it converts the computer into a platform for taking malicious action surreptitiously: spam sending, launch of Denial of Service attacks, malware distribution, etc.

It reduces the security level of the computer:
it awaits remote-control orders received through
IRC.

Gaobot.KSS uses the following propagation or distribution methods:

Exploiting vulnerabilities with the intervention of the user: exploiting vulnerabilities in file formats or applications. To exploit them successfully it needs the intervention of the user: opening files, viewing malicious web pages, reading emails, etc.

Via Internet, exploiting remote vulnerabilities: attacking random IP addresses, in which it tries to insert a copy of itself by exploiting one or more vulnerabilities.